Claims 

[cl ] A method of backing up one or more files on a local device onto remote servers 

over a network comprising: 

deriving a first cryptographic key and a second cryptographic key from a 
user-provided passphrase; 

compressing one or more files and adding each of the files to a bundle; 
generating an authentication code for the bundle using the first 
cryptographic key and adding the authentication code to the bundle; and 
encrypting the bundle using the second cryptographic key prior to 
sending the bundle to the remote server. 

O [c2] The invention of claim 1 wherein the bundle is encrypted using a strong block 

ff* cipher. 

03 

rU [c3] The invention of claim 1 wherein the authentication code is an HMAC. 

y 8 

ru 

m [c4] The invention of claim 1 wherein the cryptographic keys contain at least 1 28 

y 3 

3 bits. 

AS. 

ljl [c5] A method of restoring one or more files on remote servers to a local device over 

+= a network comprising: 

Q 

M>. deriving a first cryptographic key and a second cryptographic key from a 

user-provided passphrase; 

decrypting a bundle received from the remote server using the second 
cryptographic key; 

checking an authentication code in the bundle using the first 
cryptographic key; and 

decompressing one or more files from the bundle; 

[c6] The invention of claim 5 wherein the bundle was encrypted using a strong block 

cipher. 

[c7] The invention of claim 5 wherein the authentication code is an HMAC. 

[c8] The invention of claim 5 wherein the cryptographic keys contain at least 1 28 

bits. 
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[c9] A device-readable medium storing program instructions for performing a 

method of backing up one or more files on a local device onto remote servers 
over a network, the method comprising the steps of: 

deriving a first cryptographic key and a second cryptographic key from a 
user-provided passphrase; 

compressing one or more files and adding each of the files to a bundle; 
generating an authentication code for the bundle using the first 
cryptographic key and adding the authentication code to the bundle; and 
encrypting the bundle using the second cryptographic key prior to 
sending the bundle to the remote server. 

S [cl 0] The invention of claim 9 wherein the bundle is encrypted using a strong block 

■K5T 

JSSSL 

cipher. 

m 

U! [d 1] The invention of claim 9 wherein the authentication code is an HMAC. 

fU 

y i [cl 2] The invention of claim 9 wherein the cryptographic keys contain at least 1 28 

O bits. 

[cl 3] A device-readable medium storing program instructions for performing a 

S method of restoring one or more files on remote servers to a local device over a 

network, the method comprising the steps of: 

deriving a first cryptographic key and a second cryptographic key from a 
user-provided passphrase; 

decrypting a bundle received from the remote server using the second 
cryptographic key; 

checking an authentication code in the bundle using the first 
cryptographic key; and 

decompressing one or more files from the bundle; 

[cl 4] The invention of claim 1 3 wherein the bundle was encrypted using a strong 

block cipher. 

[cl 5] The invention of claim 1 3 wherein the authentication code is an HMAC. 

[cl6] 

The invention of claim 1 3 wherein the cryptographic keys contain at least 1 28 
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